[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: SSL related error

From: Joe Orton <joe_at_manyfish.co.uk>
Date: 2003-10-01 11:09:14 CEST

On Wed, Oct 01, 2003 at 08:50:43PM +1200, Nick Wright wrote:
> Hi - yes I do:
>
> SSLProtocol -all +SSLv2
> SSLCipherSuite SSLv2:+HIGH:+MEDIUM:+LOW:+EXP
>
> This was from the Apache2 SSL/TLS howto page.
> I have changed the lines to this (from the same page):
>
> SSLProtocol all
> SSLCipherSuite HIGH:MEDIUM
>
> ..problem solved - thanks!
>
> Would you like me to leave the server set up with the old flags for a while?

No, thanks, I can reproduce the bug here now I've worked out what was
different about your server. The recommended default config is to use
no SSLProtocol line and this cipher suite config:

    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

for best compatiblity with web browsers.

Regards,

joe

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Oct 1 11:10:11 2003

This is an archived mail posted to the Subversion Users mailing list.